Analysis

  • max time kernel
    185s
  • max time network
    194s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29-11-2022 06:57

General

  • Target

    db2f5b7f4f5726e9b7d7d23bd234d5911d74f41c31feb4c39c3f2ff54847a35f.exe

  • Size

    1.2MB

  • MD5

    3e6c599d00576b448072902fb48bd8cf

  • SHA1

    87b9d54c4a6992665d59d545f35da54281359be5

  • SHA256

    db2f5b7f4f5726e9b7d7d23bd234d5911d74f41c31feb4c39c3f2ff54847a35f

  • SHA512

    d27c8450e58d275f2ee3dfd2f19256f7895c5581ef690f4db02aa51c6a47a0b2877238b57900fdae0b10133cf82bad8730781bdfc08720fd0178ee825f976aee

  • SSDEEP

    24576:GE1YV7Ua+wGgharPwGOoZQg64ttgFPExrC+gXMza:GE1YVYhw5aT3I4ttVc+g82

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Drops file in System32 directory 2 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\db2f5b7f4f5726e9b7d7d23bd234d5911d74f41c31feb4c39c3f2ff54847a35f.exe
    "C:\Users\Admin\AppData\Local\Temp\db2f5b7f4f5726e9b7d7d23bd234d5911d74f41c31feb4c39c3f2ff54847a35f.exe"
    1⤵
    • Loads dropped DLL
    • Drops file in System32 directory
    • Suspicious use of SetWindowsHookEx
    PID:3804

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Windows\SysWOW64\oledsp32.dll

    Filesize

    26KB

    MD5

    6db0debfb98119305df3801c4c2555e3

    SHA1

    03b6267361a197c2ee29af483bca73d15192c915

    SHA256

    dcc50a77ef007040e97cf8001a743a7909db19be6b32af28feaa68d775fe2c4f

    SHA512

    5a85de074db1a8bd32aba1a4b6837e2f7bee9ac7734331e77f02289a8b2c3bfde91734cdc525125d3c6800329e9a5f07b56f9d1dd8074b6df49684c90a181fb3

  • memory/3804-132-0x0000000000400000-0x000000000053E000-memory.dmp

    Filesize

    1.2MB

  • memory/3804-134-0x0000000010000000-0x0000000010010000-memory.dmp

    Filesize

    64KB

  • memory/3804-135-0x0000000000400000-0x000000000053E000-memory.dmp

    Filesize

    1.2MB

  • memory/3804-136-0x0000000010000000-0x0000000010010000-memory.dmp

    Filesize

    64KB